Description
The ISO 22301 Business Continuity course (Lead Auditor level) is an advanced programme that prepares participants to lead third-party audits for ISO 22301:2019 certification, combining the BCMS requirements with the certification methodology (ISO/IEC 17021-1) and the ISO 223xx family.
Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, with exercises, case studies and a mock exam that walks through a complete audit, from the programme to the report and the certification decision.
Main topics
| āBCMS and ISO 22301:2019 | āThe ISO 223xx family |
| āBIA and risk assessment | āStrategies, procedures and emergencies |
| āPlan exercises and testing | āAccreditation and ISO/IEC 17021-1 |
| āStage 1 and Stage 2 | āAudit conduct and certification decision |
Course programme
| 01 | The BCMS and ISO 22301:2019: harmonised structure and the PDCA cycle |
| 02 | The ISO 223xx family: 22313 (guidance), 22316 (organizational resilience), 22317 (BIA), 22331 (strategy), 22332 (procedures), 22320 (emergencies) |
| 03 | Context of the organisation and interested parties (clause 4) |
| 04 | Leadership, policy and roles (clause 5) |
| 05 | Planning: risks and opportunities, business continuity objectives (clause 6) |
| 06 | Business Impact Analysis (BIA): methodology and critical issues (ISO/TS 22317) |
| 07 | Business continuity risk assessment |
| 08 | Business continuity strategies and solutions (ISO/TS 22331) |
| 09 | Business continuity procedures and incident response structure (ISO/TS 22332) |
| 10 | Emergency management and crisis communication (ISO 22320) |
| 11 | Support: resources, competence, awareness and communication (clause 7) |
| 12 | Operation and business continuity plans (clause 8) |
| 13 | Exercise programme and plan testing (clause 8.6) |
| 14 | Performance evaluation and management review (clause 9) |
| 15 | Improvement and nonconformity (clause 10) |
| 16 | Accreditation and certification: ISO/IEC 17021-1 and the BCMS certification scheme |
| 17 | Audit programming and audit time; team competence and impartiality |
| 18 | Stage 1 and Stage 2: document review and verification of effective implementation |
| 19 | Conducting the audit: meetings, sampling, interviews, evidence; risk-based nonconformities and the certification decision |
| 20 | Mock exam and end-to-end audit: from the programme to the report and the certification decision |
The programme is complemented by exercises, case studies, a mock exam and a final learning assessment.
Solid knowledge of ISO 22301 (Implementer and/or Internal Auditor level) and audit experience according to ISO 19011. No preparatory courses or specific digital skills are required.
Methodology and materials
Certificate of attendance
A certificate of attendance is issued at the end of the course.
